CVE-2021-46424

Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal…

published April 27, 2022

CVSS
—
EPSS
36%
Percentile
98.5
In the wild
Unconfirmed
What it is

🚨 A rogue DELETE request is all it takes to wipe files clean from the Telesquare TLR-2005KSH! Think of it like a careless janitor who can remove any book from a library without a trace, tossing aside valuable archives and essentials just because they were told to clear out the shelves. An attacker could exploit this vulnerability to delete crucial files from the system, potentially disrupting operations or erasing sensitive data. The consequences could be absolutely devastating for any organization relying on this device for day-to-day tasks.

Put simply

Think of it like a careless janitor who can remove any book from a library without a trace, tossing aside valuable archives and essentials just because they were told to clear out the shelves. This vulnerability allows a remote attacker to execute arbitrary file deletions by sending crafted DELETE requests, bypassing any security checks that would typically prevent such actions.

What to do

An attacker could exploit this vulnerability to delete crucial files from the system, potentially disrupting operations or erasing sensitive data. The consequences could be absolutely devastating for any organization relying on this device for day-to-day tasks. Immediately review your Telesquare TLR-2005KSH setup and implement access controls to prevent unauthorized DELETE requests. If possible, consider patching to a more secure version as soon as one becomes available. Regularly audit your systems to ensure no critical files are left vulnerable! You've got this! With a little diligence, you can keep your systems safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.36459 · 98.5th percentile
Published
2022-04-27T11:34Z
EPSS history
Timeline
  • 27 APR 11:34Z
    Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal…
    cvelistv5